CVE-2023-4320: falha de alta gravidade em Red Hat Satellite 6.15 for RHEL 8
Satellite: arithmetic overflow in satellite
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.6epss 0.7%
da publicação à arma
Publicada no NVD18 de dez.
VulnCheck+297d
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
Red Hat · Red Hat Satellite 6.15 for RHEL 8CVEs relacionadas — Red Hat Satellite 6.15 for RHEL 8
No mesmo produto, das mais perigosas para as menos.
CVE-2023-5189MEDIUMHub: insecure galaxy-importer tarfile extractionEPSS 1.0%CVE-2024-7923CRITICALPuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreEPSS 0.8%CVE-2024-7012CRITICALPuppet-foreman: an authentication bypass vulnerability exists in foremanEPSS 0.8%CVE-2025-10622HIGHForeman: os command injection via ct_location and fcct_location parametersEPSS 0.7%CVE-2024-4871MEDIUMForeman: host ssh key not being checked in remote executionEPSS 0.6%CVE-2024-8553MEDIUMForeman: read-only access to entire db from templatesEPSS 0.4%